Analysis
- max time kernel
149s - max time network
147s - platform
ubuntu-18.04_amd64 - resource
ubuntu1804-amd64-20260513-en - resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20260513-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system - submitted
08/08/2026, 18:20
Behavioral task
behavioral1
Sample
sdfjgnjsdf.i686
Resource
ubuntu1804-amd64-20260513-en
3 signatures
150 seconds
General
- Target sdfjgnjsdf.i686
- Size 55KB
- Sample260808-wy4ppafa29
- SHA256 08dd551f0edc06ddc1050a0a81439c9367bd70f34dc13e055d5cd1eec0740e42
- MD5 ce19b6c580ca4279e4b15010e2865d2e
- SHA1 be575914f93f63b7e2fed068d0c90dfe8780b14a
- SHA512 e9f694e5788961b9315679679830455cbc8844063a2f47ff4192897b2300975f5bfaff2d7d713ec1c2d4c35199d98cf9587ad62d85efadcd41820d9b6a21d0e6
- SSDEEP 1536:rzAPnvIWW7jbL06gF65UHoGY/BLbdpSiouo7WaS4nouy8GyT:ravo7vr5KRY/BPd/8/Swoutn
- TLSH T1274301E5FD1ADB00C3E5923685AAF44FD90C92DFBE940470B9D084E06523B0E25A9BB6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Malware Config
Extracted
Family
-
mirai
Botnet
-
LZRD
C2
-
8.8.8.8
-
94.154.43.46
Signatures
- Modifies Watchdog functionality 1 TTPs 2 IoCs
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
description ioc Process File opened for modification /dev/watchdog sdfjgnjsdf.i686 File opened for modification /dev/misc/watchdog sdfjgnjsdf.i686 - Writes file to system bin folder 2 IoCs
description ioc Process File opened for modification /sbin/watchdog sdfjgnjsdf.i686 File opened for modification /bin/watchdog sdfjgnjsdf.i686